From: Florian Westphal <fw@strlen.de>
To: fxp2001640163@gmail.com
Cc: pablo@netfilter.org, kaber@trash.net, kadlec@blackhole.kfki.hu,
netfilter-devel@vger.kernel.org, coreteam@netfilter.org,
netdev@vger.kernel.org, Xiaoping Fan <xfan@codeaurora.org>
Subject: Re: [PATCH 2/3] netfilter: nat: snat created in route process just apply to routed traffic
Date: Sun, 31 Jul 2016 21:00:56 +0200 [thread overview]
Message-ID: <20160731190056.GA14216@breakpoint.cc> (raw)
In-Reply-To: <1469915644-16861-1-git-send-email-xfan@codeaurora.org>
fxp2001640163@gmail.com <fxp2001640163@gmail.com> wrote:
> From: Xiaoping Fan <xfan@codeaurora.org>
>
> In some situations, packet goes through Linux twice, one for bridging,
> another for routing. If snat is created in bridging process, that means
Hmm, but SNAT happens in POSTROUTING.
Where can we enter routing path after bridge went though postrouting...?
Normally if bridge packet has local dst mac kb traversal is:
bridge prerouting -> bridge input -> ipv4 prerouting (hook invocation
suppressed via bridge netfilter sabotage hook)
Depending on route table we then end up in ipv4 input (again suppressed)
or in forward and postrouting.
What is the issue, exactly?
prev parent reply other threads:[~2016-07-31 19:00 UTC|newest]
Thread overview: 2+ messages / expand[flat|nested] mbox.gz Atom feed top
2016-07-30 21:54 [PATCH 2/3] netfilter: nat: snat created in route process just apply to routed traffic fxp2001640163
2016-07-31 19:00 ` Florian Westphal [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20160731190056.GA14216@breakpoint.cc \
--to=fw@strlen.de \
--cc=coreteam@netfilter.org \
--cc=fxp2001640163@gmail.com \
--cc=kaber@trash.net \
--cc=kadlec@blackhole.kfki.hu \
--cc=netdev@vger.kernel.org \
--cc=netfilter-devel@vger.kernel.org \
--cc=pablo@netfilter.org \
--cc=xfan@codeaurora.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.